dhi.io/postgres
PostgreSQL 14.x (dev)
14-debian-dev, 14-debian13-dev, 14-dev, 14.24-debian-dev, 14.24-debian13-dev, 14.24-dev
sha256:64e64494f2016f6cc3517d1c4fa1d241535d61caabc51834eccd1c2678f84000
Manifest digest:sha256:13d31898754eff6bd36be23183d42ad2debbaf04460f3c613e2737579f762dee
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:560c5c7e59b2587d8b6b2373340b1b46c6cca2cd912e347a63eabb620365d3bc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:851e096a1c3e6df5d19dec9953bc485c22aae8b72e0d36757a17b351abb6b1c1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:a025ff69e0fa53eed524ceff775396993cc19a191ab5887d14434830ae74eaab |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:0b1658ac179b62c1006f1cb9f6e7106c7880c9d55d63ce7c168e0ef387729b85 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:fdf58bf19d0cefba5dcfa3d07819431ca25a6a02a0fc5ee05244900f384d94e0 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:30e9b3d5eabdd5ea0e64017d15deca4023797d5606ea39f471a63eec4eb48ff2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:6c317bd6848c38860f7ec4d10fcac32c23fc92ed80c1d19d571c8b9f1e27034d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:676b6315392004ad88ac3493ac48887d15cc7f987307a7bd3df4e822bd2e307d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:9c8cad43a2c588e072f7918bae2e37c0f75b620c2f382e5b3af660ea1b6b91ed |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:d4707906a757a8db448bec249044ed64eafc2fd59fb96c72c404d9d0a5040fe1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:c8cd78385c0553013a9a57d1d27969e32461b2d6962cd33d85619f9debb35d2f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:a9915de2b04e67b2e1ce5aa698e15b9d777e6f170e5d5f6d44f5bdb6dc1892b5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:a03deb83827bd8f1751493080bb6e49574b1e11e02c091dbdc0df9f99c7a9382 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:fd2c1ec37b55328ba94dc9de0cd635a1e6a5aecc9e6677fbc22af3d1531265bb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:af80205e8830957d5ba1f98ddf038e443ba29c77c5c55ac2b2cf31c5509c9522 |